Responsibilities

Design and build highly available, security-critical key management services in Go from design through production operation.

Lead key lifecycle workflows covering key generation, rotation, escrow, destruction, correctness guarantees, and audit trails.

Design and scale DEK/KEK envelope-encryption hierarchies for Storage, Databases, and Inference workloads.

Incorporate FIPS 140-2, SOC 2, audit logging, key material handling, and cryptographic algorithm governance into engineering designs.

Identify and remediate vulnerabilities including side-channel exposure and privilege escalation in key access APIs.

Improve KMS reliability and performance and lead incident response and postmortems for security-sensitive production events.

Mentor IC2 engineers through code reviews and design feedback in applied cryptography and security engineering.

Requirements

- 4–7 years of software engineering experience, including 1–2 years focused on cryptographic systems, key management, or security-critical distributed services.
- Strong proficiency in Go and a solid understanding of gRPC microservices architecture.
- Working knowledge of AES-GCM, RSA, ECDSA, HMAC, HKDF, and PBKDF2, including their correct application.




- Hands-on experience with HSMs or cloud KMS services such as AWS KMS, GCP Cloud KMS, HashiCorp Vault, or Thales/Luna.
- Understanding of FIPS 140-2 requirements and familiarity with SOC 2 or comparable audit frameworks for key management.
- Understanding of consensus, replication, and partitioning for distributed systems operating under failure conditions.
- Hands-on experience with Kubernetes, SQL/MySQL, and Terraform.
- Ability to collaborate across IAM, Storage, Databases, and Inference teams and communicate security trade-offs to technical and non-technical stakeholders.
- Preferred experience with AWS Secrets Manager, PKCS#11, KMIP, or customer-facing encryption products such as BYOK and CMEK.

Benefits

Hybrid role located in Bengaluru, India.

Adaptable time off, local team meetups, and mental health and well-being support, with benefits varying by location.

Reimbursement for relevant conferences, training, and education subject to company policy.

Eligible non-sales employees may participate in an annual bonus plan and may receive a new-hire equity grant, subject to plan terms and local eligibility.

Eligible employees in participating countries may have access to an Employee Stock Purchase Program.

📌 AWS - Senior Software Development Engineer (Bengaluru)
🏢 DigitalOcean
📍 Bengaluru